Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-23 Thread Sverre Moe
I have found out that the connector can use these ciphers, but Chromium can't. I wrote a small Java program that makes a HttpsConnection with Tomcat without problem. Output with -Djavax.net.debug=ssl main, WRITE: TLSv1.2 Change Cipher Spec, length = 1 *** Finished verify_data: { 167, 191, 12,

Tomcat is down or refused connection

2014-05-23 Thread Ballarpure, Akshay (EXT-Tata Consultancy Ser - IN/Hyderabad)
Hello, Soap request is failing with below message in our application. 2014/05/20 06:48:43 [ERROR] (browse_csl) failed to reach startSearch service, soapRC 502 2014/05/20 06:48:43 [ERROR] (soap)Error 502 fault: SOAP-ENV:Server [no subcode] I am seeing

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-23 Thread David Bullock
NSA: So, how much do you want to not actually *use* string ciphers with perfect forward secrecy? Mozilla,Google,Opera,et-al: Hey, that's a business model RIGHT THERE! How much do you even have? NSA: How about, not being put out of business permanently, family members keeping up their low

Re: AJP protocol with Apache Tomcat Version 7.0.52

2014-05-23 Thread Mark Thomas
On 23/05/2014 03:42, pradeepgm wrote: Now we have configured three tomcat instances with below configurations to test the above issue 1. AJP BIO with JkOptions +DisableReuse, connectionTimeout=2, maxThreads=250, maxConnection=245 2. AJP NIO with maxThreads=250, maxConnection=245,

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-23 Thread Sverre Moe
I am using the following ciphers in Tomcat:

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-23 Thread Igor Cicimov
On 23/05/2014 5:43 PM, Sverre Moe sverre@gmail.com wrote: I am using the following ciphers in Tomcat:

CATALINA_PID != real PID

2014-05-23 Thread Арсений Зинченко
Hi, guys. I set: $ export CATALINA_PID=$CATALINA_HOME/conf/catalina.pid Started *Tomcat*: $ ./bin/startup.shUsing CATALINA_BASE: /home/tomcats/apache-tomcat-7.0.53Using CATALINA_HOME: /home/tomcats/apache-tomcat-7.0.53Using CATALINA_TMPDIR: /home/tomcats/apache-tomcat-7.0.53/tempUsing

Re: CATALINA_PID != real PID

2014-05-23 Thread Leon Rosenberg
Hello Arseniy, I don't know why it doesn't work for you, it works for me: export CATALINA_PID=/opt/app/tomcat7/pid */opt/app/tomcat7*$ more pid 5856 ps aux | grep 5856: thales5856 0.0 43.6 642472 228788 ? Sl Apr28 29:19 /opt/java/jdk1.7.0_45/bin/java

Re: CATALINA_PID != real PID

2014-05-23 Thread Арсений Зинченко
Hi, Leon. Thanks for replay. Don't know why - but now it works good :-)

Re: CATALINA_PID != real PID

2014-05-23 Thread Leon Rosenberg
The usual Heisenbug. regards Leon On Fri, May 23, 2014 at 1:24 PM, Арсений Зинченко setev...@gmail.comwrote: Hi, Leon. Thanks for replay. Don't know why - but now it works good :-)

Java Wrapper Service -Linux

2014-05-23 Thread vicky
Guys, CAn someone please share the steps needed to configure the Java wrapper service for Tomcat. I'm using Tomcat 7 with JDK 1.7 on a Linux machine I have added the wrapper.conf under Catalina_base/conf directory wrapper script under Catalina_base/bin. WHile executing the ./wrapper -c

Re: AJP protocol with Apache Tomcat Version 7.0.52

2014-05-23 Thread pradeepgm
Attached all files here. Just masked the customer domain. conf-files.zip http://tomcat.10.x6.nabble.com/file/n5017851/conf-files.zip Please note that we have multiple tomcat instances supported by one common apache httpd server. I just added the one (Tomcat 7) which is having this issue

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-23 Thread Sverre Moe
NIO does support them according to the java documentation. These ciphers have been implemented in the JSSE provider. I have no problem making a connection to Tomcat via a Java program using a HttpsConnection and are getting the highest cipher (TLS_ECDHE_RSA_WITH_ AES_256_GCM_SHA384). 2014-05-23

Re: AJP protocol with Apache Tomcat Version 7.0.52

2014-05-23 Thread Mark Eggers
On 5/23/2014 8:09 AM, pradeepgm wrote: Attached all files here. Just masked the customer domain. conf-files.zip http://tomcat.10.x6.nabble.com/file/n5017851/conf-files.zip Please note that we have multiple tomcat instances supported by one common apache httpd server. I just added the one

Re: AJP protocol with Apache Tomcat Version 7.0.52

2014-05-23 Thread Mark Thomas
On 23/05/2014 17:59, Mark Eggers wrote: In general, it's not a good idea to reference a zip file. Post information inline without comments, and with sensitive information obscured (not removed - since that can alter the configuration meaning). +1 Thanks for doing this. snip/ Connector

Re: AJP protocol with Apache Tomcat Version 7.0.52

2014-05-23 Thread pradeepgm
You have a blocking AJP connector (BIO) with maxThreads of 250. Therefore that connector can support a maximum of 250 connections. You have httpd with MaxClients 1536 and - since AJP uses persistent connections - you have httpd trying to create up to 1536 persistent connections. The first 250

Re: AJP protocol with Apache Tomcat Version 7.0.52

2014-05-23 Thread Mark Thomas
On 23/05/2014 19:26, pradeepgm wrote: You have a blocking AJP connector (BIO) with maxThreads of 250. Therefore that connector can support a maximum of 250 connections. You have httpd with MaxClients 1536 and - since AJP uses persistent connections - you have httpd trying to create up to 1536

Re: Java Wrapper Service -Linux

2014-05-23 Thread Mark Eggers
On 5/23/2014 6:05 AM, vicky wrote: Guys, CAn someone please share the steps needed to configure the Java wrapper service for Tomcat. I'm using Tomcat 7 with JDK 1.7 on a Linux machine I have added the wrapper.conf under Catalina_base/conf directory wrapper script under Catalina_base/bin.

Re: Tomcat 7 cannot get ciphers with SHA256 or SHA384

2014-05-23 Thread Igor Cicimov
On 24/05/2014 1:15 AM, Sverre Moe sverre@gmail.com wrote: NIO does support them according to the java documentation. I was refering to cipher order and tomcat7 connector documentation where only the apr connector supports the option SSLHonorCipherOrder

Re: Tomcat is down or refused connection

2014-05-23 Thread Terence M. Bandoian
On 5/23/2014 1:22 AM, Ballarpure, Akshay (EXT-Tata Consultancy Ser - IN/Hyderabad) wrote: Hello, Soap request is failing with below message in our application. 2014/05/20 06:48:43 [ERROR] (browse_csl) failed to reach startSearch service, soapRC 502 2014/05/20 06:48:43 [ERROR]

Re: Tomcat is down or refused connection

2014-05-23 Thread Mark Eggers
On 5/23/2014 5:34 PM, Terence M. Bandoian wrote: On 5/23/2014 1:22 AM, Ballarpure, Akshay (EXT-Tata Consultancy Ser - IN/Hyderabad) wrote: Hello, Soap request is failing with below message in our application. 2014/05/20 06:48:43 [ERROR] (browse_csl) failed to reach